diff --git a/base/flux/kustomization.yaml b/base/flux/kustomization.yaml index c9e5f292b0dfae1133e7f589bd070f82631eecc0..2b2c2788eabd3f438ce3bb7cd8e68654adb873bb 100644 --- a/base/flux/kustomization.yaml +++ b/base/flux/kustomization.yaml @@ -37,12 +37,15 @@ patches: terminationGracePeriodSeconds: 60 # Required by Pod Security Policy securityContext: - runAsUser: 10000 - fsGroup: 1337 + runAsUser: 1000 + fsGroup: 1000 containers: - name: manager # Required by Pod Security Policy securityContext: + runAsUser: 1000 + runAsGroup: 1000 + privileged: false readOnlyRootFilesystem: true allowPrivilegeEscalation: false runAsNonRoot: true @@ -128,4 +131,4 @@ patches: memory: 150Mi requests: cpu: 100m - memory: 150Mi \ No newline at end of file + memory: 150Mi diff --git a/scripts/install_flux.sh b/scripts/install_flux.sh index e634a4f393e11c62421452f1a07753050e83936e..e0b4b03a561d5c74ff79802efc6bcfa5a33de573 100755 --- a/scripts/install_flux.sh +++ b/scripts/install_flux.sh @@ -9,7 +9,7 @@ set -e REGISTRY_URL=registry1.dso.mil FLUX_KUSTOMIZATION=base/flux FLUX_SECRET=private-registry -WAIT_TIMEOUT=120 +WAIT_TIMEOUT=300 #